Dushnilin
0ea1c73832
- Fix #50: Discord community subnets hijacking Cloudflare Anycast traffic: * Filter broad Cloudflare shared subnets (104.16.0.0/12, 172.64.0.0/13, etc.) for Discord preset in generator_routes.uc, nft/apply.uc, and updates.uc. * Add tachyon resolve_domain CLI and runtime.uc helper for DNS queries with rpcd ACL support. * Update LuCI Routing Rule Tracer to resolve queried domains against section subnets/CIDRs (including community subnets) and show shared CDN/Anycast warnings. * Add unit tests in tests/community_subnets_sanitization.sh. - Fix #51: Telegram bot spamming WAN up/down notifications on hotplug: * Check enable_badwan_interface_monitoring, telegram.enabled, and badwan_monitored_interfaces list in 99-tachyon-wan-monitor. * Add background debounce with atomic directory locking and ubus interface status verification. * Implement state transition tracking to only notify on actual UP->DOWN and DOWN->UP changes without duplicates. * Preserve retry_start_on_wan_up behavior on ifup. * Add comprehensive integration test suite in tests/wan_monitor_hotplug.sh.
113 lines
2.3 KiB
JSON
113 lines
2.3 KiB
JSON
{
|
|
"luci-app-tachyon": {
|
|
"description": "Grant UCI and RPC access to LuCI app Tachyon",
|
|
"read": {
|
|
"file": {
|
|
"/etc/init.d/tachyon": [
|
|
"exec"
|
|
],
|
|
"/etc/config/tachyon": [
|
|
"read"
|
|
],
|
|
"/sbin/logread": [
|
|
"exec"
|
|
],
|
|
"/var/run/tachyon/section-cache/*": [
|
|
"read"
|
|
],
|
|
"/tmp/run/tachyon/section-cache/*": [
|
|
"read"
|
|
],
|
|
"/var/run/tachyon/component-actions/*": [
|
|
"read"
|
|
],
|
|
"/tmp/run/tachyon/component-actions/*": [
|
|
"read"
|
|
],
|
|
"/var/run/tachyon/ui-state/*": [
|
|
"read"
|
|
],
|
|
"/tmp/run/tachyon/ui-state/*": [
|
|
"read"
|
|
],
|
|
"/var/run/tachyon/ui-state/service-actions/*": [
|
|
"read"
|
|
],
|
|
"/tmp/run/tachyon/ui-state/service-actions/*": [
|
|
"read"
|
|
],
|
|
"/var/run/tachyon/ui-state/latency-actions/*": [
|
|
"read"
|
|
],
|
|
"/tmp/run/tachyon/ui-state/latency-actions/*": [
|
|
"read"
|
|
],
|
|
"/usr/bin/tachyon": [
|
|
"exec"
|
|
],
|
|
"/usr/bin/sing-box": [
|
|
"exec"
|
|
],
|
|
"/usr/sbin/sing-box": [
|
|
"exec"
|
|
],
|
|
"/tmp/sing-box/rulesets/*": [
|
|
"read"
|
|
],
|
|
"/etc/tachyon/rulesets/*": [
|
|
"read"
|
|
],
|
|
"/bin/cat": [
|
|
"exec"
|
|
],
|
|
"/usr/bin/nslookup": [
|
|
"exec"
|
|
],
|
|
"/bin/busybox": [
|
|
"exec"
|
|
]
|
|
},
|
|
"ubus": {
|
|
"luci-rpc": [
|
|
"getDHCPLeases",
|
|
"getHostHints"
|
|
],
|
|
"network.interface": [
|
|
"dump"
|
|
],
|
|
"service": [
|
|
"list"
|
|
]
|
|
},
|
|
"uci": [
|
|
"tachyon"
|
|
]
|
|
},
|
|
"write": {
|
|
"file": {
|
|
"/var/run/tachyon/ui-state/*": [
|
|
"write"
|
|
],
|
|
"/tmp/run/tachyon/ui-state/*": [
|
|
"write"
|
|
],
|
|
"/var/run/tachyon/ui-state/service-actions/*": [
|
|
"write"
|
|
],
|
|
"/tmp/run/tachyon/ui-state/service-actions/*": [
|
|
"write"
|
|
],
|
|
"/var/run/tachyon/ui-state/latency-actions/*": [
|
|
"write"
|
|
],
|
|
"/tmp/run/tachyon/ui-state/latency-actions/*": [
|
|
"write"
|
|
]
|
|
},
|
|
"uci": [
|
|
"tachyon"
|
|
]
|
|
}
|
|
}
|
|
}
|